cooper-oai 79a19cbb30 Add ephemeral runtime registration and signed assertions (#55402) ...

## What changed

Extend `codex-runtime-agent-instance` with a registration client and an in-memory assertion signer. Pending registrations retain their signing key and idempotency key across caller-driven retries; registered runtimes generate fresh versioned assertions with a timestamp and unique ID.

Bound registration requests and responses, reject unsafe endpoints, disable redirects and request logging, and preserve network policy errors. Report server rejections using only the status and recognized error codes.

## Testing

Add HTTP-backed tests for retry stability, assertion signatures and freshness, policy revocation, endpoint and response validation, redirect refusal, and error redaction.

GitOrigin-RevId: a6dab0900459dfb75f72652a0a2ee1e4b65ca322

2026-10-19 23:01:54 +00:00

..

src

Add ephemeral runtime registration and signed assertions (#55402)

2026-10-19 23:01:54 +00:00

BUILD.bazel

Add wire types for runtime agent registration (#55398)

2026-10-19 22:21:46 +00:00

Cargo.toml

Add ephemeral runtime registration and signed assertions (#55402)

2026-10-19 23:01:54 +00:00